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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)0 Responsive to communication(s) filed on 23 November 2005 . 
2a)(3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-7 and 10-19 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E<] Claim(s) 1-7 and 10-19 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)Q None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . Claims 1 -7 and 1 0-1 9 are pending in this office action. 

2. Applicant's arguments, filed November 23, 2005, have been fully considered but 
they are not persuasive. 

Claim Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

5. Claims 16-19 rejected under 35 U.S.C. 102(b) as being anticipated by Lewis 
(U.S. Patent No. 5,761,306). 

Regarding claim 16 , Lewis teaches a method of updating a cryptographic key 
used for decrypting distributed data, the method comprising: 
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• Generating a first key for decrypting the distributed data, the first key of a first 
length (fig. 2, ref. num S1 and col. 5, lines 50-55); 

• Encrypting the first key with a second key, the second key of a second length, 
wherein the second length is longer than the first length (col. 9, lines 26-32); and 

• Distributing the encrypted first key (fig. 6, ref. num S8 and S9A). 

Regarding claim 17 , Lewis teaches further comprising distributing data encrypted 
with the first key (col. 1 , lines 41-60). 

Regarding claim 18 , Lewis teaches further comprising: 

• Generating a third key to replace the first key, the third key of a third length, 
wherein the third length is shorter than the second length (col. 1 1 , lines 39-49); 

• Encrypting the third key with the second key (col. 10, lines 17-24); and 

• Distributing the encrypted third key (col. 11, lines 50-56). 

Regarding claim 19 , Lewis teaches further comprising distributing data encrypted 
with the third key (col. 1, lines 41-60). 

Claim Rejections - 35 USC § 103 

6. Claims 1-7 and 10-15 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Lewis (USP '306) in view of Schneier, "Applied Cryptography: Protocols, Algorithms, 
and Source Code in C." Second Edition, pps. 183-184 (hereinafter Schneier). 
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Regarding claim 1 , Lewis teaches an asymmetric cryptographic processing 
system using a multiple key hierarchy, the asymmetric cryptographic processing system 
comprising: 

• A first key for performing asymmetric operations at a first rate, wherein each 
operation requires a first cryptographic processing time (fig. 2, ref. num S1 and 
col. 5, lines 50-55); and 

• A second key for performing an asymmetric cryptographic processing operation 
to update the first key (fig. 2, ref. num S2 and col. 5, lines 50-55), wherein the 
second key is used for cryptographic processing operations for the first key (col. 
9, lines 26-32) and requires a second cryptographic processing time greater than 
the first cryptographic processing time (col. 7, lines 43-50). 

Lewis does not teach wherein the second key is at a second rate that is less 
often than the first rate. 

Schneier teaches wherein the second key is at a second rate that is less often 
than the first rate (section 8.10). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the second key processes at a second rate that is less 
than the first rate, as taught by Schneier . with the method/medium of Lewis . It would 
have been obvious for such modifications because different keys are used differently for 
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different applications. Telephone communication keys should be changed with every 
call, whereas keys for storage of files should rarely be changed (see section 8.10 of 
Schneier). If the second key requires more processing time, as claimed above, it would 
be beneficial to change the rate of the key less than that of the first key. 

Regarding claims 2-5 , Lewis as modified by Schneier teaches wherein the 
system is used to cryptographically process and transfer digital [voice/audio/video] data 
in a network (see col. 1 , lines 41-60 of Lewis). 

Regarding claim 6 , Lewis as modified by Schneier teaches wherein the second 
key is hard coded into the system at the time of manufacturing the system (see section 
8.10 of Schneier and col. 7, lines 43-50 of Lewis, it would provide more security if the 
second key were hard coded into the system in a case where the second key was used 
for a more intensive cryptographic process and changed less often). 

Regarding claim 7 , Lewis as modified by Schneier teaches wherein a plurality of 
digital cryptographic processing systems are coupled by a telecommunications system, 
wherein the second key is distributed to two or more of the asymmetric cryptographic 
processing systems via the telecommunications system (fig. 1, ref. num 10/12/16/26 of 
Lewis). 
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Regarding claim 10 , Lewis teaches a method for providing secure data 
transactions in a telecommunications system, wherein a digital processing device 
receives information from the telecommunications system (abstract), wherein the digital 
processing device uses a first asymmetrical cryptographically processed key to perform 
an asymmetric cryptographic processing operation to decode the information wherein 
the cryptographic processing operation is at a first level of complexity requiring a first 
amount of resources by the processing device (fig. 2, ref. num S1/S2), wherein the 
cryptographic processing operation is performed at a first rate of cryptographic 
processing operations per unit time (col. 5, lines 50-55), the method comprising: 

• Transferring a second asymmetrical cryptographically processed key to the 
digital processing device (fig. 2, ref. num S8), wherein the second asymmetrical 
cryptographically processed key is used in an asymmetric cryptographic 
processing operation at a second level of complexity requiring a second amount 
of resources by the processing device that is higher than the first amount of 
resources (col. 7, lines 43-50); 

• Updating the first asymmetrical cryptographically processed key from time-to- 
time (fig. 2, ref. num S8-S10), wherein the updating includes the following 
substeps; 

• Encoding a substitute first asymmetrical cryptographically processed key with a 
second key (col. 8, lines 15-27), so that the resulting cryptographically processed 
substitute first asymmetrical cryptographically processed key is decodable by the 
second asymmetrical cryptographically processed key (col. 10, lines 17-24); and 
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• Transferring the substitute first asymmetrical cryptographically processed key to 
the digital processing device so that the substitute first asymmetrical 
cryptographically processed key is used in subsequent cryptographic processing 
operations by the digital processing device (col. 10, lines 30-49). 

Lewis does not teach wherein the updating of the first asymmetrical 
cryptographically processed key occurs at a second rate of cryptographic processing 
operations per unit time that is less than the first rate of cryptographic processing 
operations per unit time. 

Schneier teaches wherein the updating of the first asymmetrical cryptographically 
processed key occurs at a second rate of cryptographic processing operations per unit 
time that is less than the first rate of cryptographic processing operations per unit time 
(section 8.10). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine transferring replacement keys to the devices at a 
second rate that is less than the first rate, as taught by Schneier . with the 
method/medium of Lewis . It would have been obvious for such modifications because 
different keys are used differently for different applications. Telephone communication 
keys should be changed with every call, whereas keys for storage of files should rarely 
be changed (see section 8.10 of Schneier). If the second key requires more processing 
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time, as claimed above, it would be beneficial to change the rate of the key less than 
that of the first key. 

Regarding claim 1 1 , Lewis as modified by Schneier teaches further comprising: 

• Transferring a third asymmetrical cryptographically processed key to the digital 
processing device (see fig. 2, ref. num S10 of Lewis), wherein the third 
asymmetrical cryptographically processed key is used in an asymmetric 
cryptographic processing operation at a third level of complexity requiring a third 
amount of resources by the processing device that is higher than the second 
amount of resources (see col. 7, lines 43-50 of Lewis); 

• Updating the second asymmetrical cryptographically processed key from time-to- 
time (see fig. 2, ref. num S8-S10 of Lewis), wherein the updating of the second 
asymmetrical cryptographically processed key occurs at a third rate of 
cryptographic processing operations per unit time that is less than the second 
rate of cryptographic processing operations per unit time (see section 8.10 of 
Schneier), wherein the updating includes the following substeps; 

• Encoding a substitute second asymmetrical cryptographically processed key with 
a third asymmetrical cryptographically processed key (see col. 8, lines 15-27 of 
Lewis), so that the resulting cryptographically processed substitute second 
asymmetrical cryptographically processed key is capable of being 
cryptographically processed by the third asymmetrical cryptographically 
processed key (see col. 10, lines 17-24 of Lewis); and 
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• Transferring the substitute second asymmetrical cryptographically processed key 
to the digital processing device so that the substitute second asymmetrical 
cryptographically processed key is used in subsequent cryptographic processing 
operations by the digital processing device (see col. 10, lines 30-49 of Lewis). 

Regarding claims 12-15 , Lewis as modified by Schneier teaches wherein the 
resources include [processing time/transistor density on an IC/memory capacity/data 
bandwidth] (see section 8.10, page 184 of Schneier and col. 7, lines 43-48 of Lewis). 

Response to Arguments 

7. Applicant amends claim 1 . 

8. Applicant argues: Neither Lewis or Schneier discloses the second key, used in 
cryptographic processing operations of the first key, needing a second cryptographic 
processing time greater than the first cryptographic processing time to process the first 
key (page 10, first paragraph). 

Regarding applicant's argument, examiner disagrees with applicant. Applicant 
amended claim 1 to state that the second key was used in cryptographic processing 
operations on the first key at a second rate. Prior to this amendment, the claim stated 
that the second key is used in cryptographic processing operations at a second rate. 
Lewis clearly states that a second key (replacement key) is used in cryptographic 
processing operations at a second rate and at a greater length (see col. 7, lines 43-48 
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of Lewis). Lewis states that the replacement key is longer than the key it is replacing. 
One of ordinary skill in the art knows that the longer the key, the more secure it is 
because it takes more time (resources and processing time) to discover the key. 

Conclusion 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 
272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 
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